Re: Storing encrypted passwords on AS400

[Franco Biaggi <fbiaggi@xxxxxxxxxx>]

Brett,
you could try to use your old method and store/read the data as bytes 
eg. rs.setBytes(....),
This should eliminate String conversion done by the String class or the 
JDBC driver

Ciao.

Brett Slocum wrote:

> On Wed, 09 Feb 2005 20:05:26 +0100, Franco Biaggi <fbiaggi@xxxxxxxxxx> wrote:
>  
>
> > this is possible, due to data conversions...
> > try to store the passwords in plain text like:
> >
> > String encrypted_pwd = SecurityHandler.encryptToString( enteredPassword );
> >    
>
> The only problem with this method is that the Strings generated are 40
> characters long (I just ran a test case), and the password field in
> the database is only 25 characters long. I'm trying to change the
> method of encryption without changing the database. We are installed
> in hundreds of locations and updating the AS400 library is only done
> when absolutely necessary.
>
> Is there a way to pack these bytes closer and still use Strings? I
> realize that packing them as single characters is what is giving me
> the headache in the first place.
>
> If I have to, I'll change the field length, but this would be a last
> resort, and would delay the change for at least 6 months.
>
>  


--
-----------------------------------------------------------------------------
*** This messages was scanned for malicious contents ***
-----------------------------------------------------------------------------
Franco Biaggi
CH-6807 Taverne